$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: EmZUEc6R1EqsrB2sCD+dCpqoP54+j6+2pReKHpWrUlI= Subject key identifier: FC:F2:13:10:D8:0E:07:A7:FE:A8:06:4B:37:34:06:BF:0A:6C:5B:82 Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 68 Signing time: Wed 17 Sep 2025 07:45:22 +0000 Manifest this update: Wed 17 Sep 2025 07:45:21 +0000 Manifest next update: Wed 24 Sep 2025 07:45:21 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: kiBcooe9f3mKDkrilRNsq6gSsxZq4o/bHJx1w2fEYjA=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Sep 17 07:45:21 2025 GMT Not After : Sep 24 07:45:21 2025 GMT Subject: CN=68ca6711-4539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:77:01:d7:82:6a:87:77:34:03:72:72:39: 51:cd:d0:a5:22:9b:a6:2c:37:80:d8:c2:f0:49:2f: 1c:f8:8f:a4:c2:1a:26:2c:13:f0:0b:e0:1c:fe:24: fb:ca:2a:cd:68:d3:1a:42:5e:d0:ff:f8:01:c8:2e: c6:97:22:15:61:9e:fe:3d:6a:1f:58:b4:bf:a1:00: 87:c8:38:00:ac:a3:b8:ad:ff:34:3c:ad:fc:73:58: da:62:09:63:e1:54:c5:0f:ad:47:8f:34:af:37:c3: c8:d9:f6:3f:4f:f7:29:98:d7:59:8f:37:40:0a:79: a2:42:2e:fd:7e:14:af:99:c5:ca:19:05:c6:5d:01: 47:b7:f6:59:71:4e:76:55:aa:c7:e3:6d:2d:0b:cb: e2:6a:0a:e8:95:22:f2:23:7a:da:c7:38:6f:2d:67: 65:c4:0d:6c:f7:98:22:ad:e2:ff:ff:77:a6:28:6d: f4:d7:bd:51:bb:14:d2:85:4a:fe:73:70:c9:88:34: bb:e4:63:28:20:08:7f:54:4c:b8:1c:64:dd:b9:da: 0c:d8:52:45:d3:87:e2:ce:d8:37:21:0f:16:bf:31: 94:d8:9c:ce:fa:ab:e7:f7:23:26:dc:bf:6e:f4:73: e9:0c:6c:32:31:c7:10:71:e2:da:94:55:6d:77:ea: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:13:10:D8:0E:07:A7:FE:A8:06:4B:37:34:06:BF:0A:6C:5B:82 X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:7a:4c:c3:d6:7e:50:e7:b1:c8:12:cd:0a:f2:8f:66:31:e3: a0:df:0e:5a:ee:f9:7b:fa:c9:3e:cb:74:a6:f0:ae:56:3b:17: 57:e2:76:c9:7f:c5:e9:08:5a:d8:dd:71:d5:4d:a2:62:87:f3: 25:0d:06:3b:1f:a5:12:20:9b:d9:bd:49:ad:99:5d:55:ac:b1: f2:1c:38:1c:ea:27:6e:7c:f4:3c:2a:f8:7a:95:da:5c:b0:00: a4:39:28:d9:1f:f4:19:a5:62:63:31:53:b3:b7:76:97:5b:63: bd:ec:64:d9:6a:9f:a0:80:d6:fc:d6:9f:71:78:b2:63:a5:ec: fc:13:29:54:5c:e2:99:16:d7:3e:32:9d:98:1b:e5:2b:36:96: 56:0d:ec:cd:33:8b:47:9a:bd:86:02:d6:0f:86:eb:5d:20:a1: 69:ea:ac:cd:b7:54:8f:0a:27:ac:63:22:75:78:f6:b9:e9:1e: a4:9b:6b:ac:e6:36:8c:e2:17:29:41:8d:d0:38:7d:9a:0e:3a: 5e:cd:ab:0d:09:f7:45:6e:c1:b4:3b:bb:85:13:03:bc:f0:ec: 64:e4:f1:75:f4:34:e5:a2:38:69:7f:5d:5f:6b:a0:fb:73:1e: 8b:b5:34:e6:37:a1:a6:4c:22:d2:fb:99:4f:d9:17:79:6d:ff: a5:fd:7b:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA5MTcwNzQ1MjFaFw0yNTA5MjQwNzQ1MjFaMBgxFjAUBgNV BAMTDTY4Y2E2NzExLTQ1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDg8HcB14Jqh3c0A3JyOVHN0KUim6YsN4DYwvBJLxz4j6TCGiYsE/AL4Bz+JPvK Ks1o0xpCXtD/+AHILsaXIhVhnv49ah9YtL+hAIfIOACso7it/zQ8rfxzWNpiCWPh VMUPrUePNK83w8jZ9j9P9ymY11mPN0AKeaJCLv1+FK+ZxcoZBcZdAUe39llxTnZV qsfjbS0Ly+JqCuiVIvIjetrHOG8tZ2XEDWz3mCKt4v//d6YobfTXvVG7FNKFSv5z cMmINLvkYyggCH9UTLgcZN252gzYUkXTh+LO2DchDxa/MZTYnM76q+f3Iybcv270 c+kMbDIxxxBx4tqUVW136oEVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/PITENgO B6f+qAZLNzQGvwpsW4IwHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANx6TMPWflDnscgSzQryj2Yx46DfDlru+Xv6yT7LdKbwrlY7F1fidsl/ xekIWtjdcdVNomKH8yUNBjsfpRIgm9m9Sa2ZXVWssfIcOBzqJ2589Dwq+HqV2lyw AKQ5KNkf9BmlYmMxU7O3dpdbY73sZNlqn6CA1vzWn3F4smOl7PwTKVRc4pkW1z4y nZgb5Ss2llYN7M0zi0eavYYC1g+G610goWnqrM23VI8KJ6xjInV49rnpHqSba6zm NoziFylBjdA4fZoOOl7Nqw0J90VuwbQ7u4UTA7zw7GTk8XX0NOWiOGl/XV9roPtz Hou1NOY3oaZMItL7mU/ZF3lt/6X9ezU= -----END CERTIFICATE-----Generated at Fri Sep 19 00:33:18 2025 by rpki-client